This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
File:                     XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json)
Hash identifier:          /Ois7kdg+fi3aO86H6SJNRTR1yrQ9/u81V/xmDAnpQY=
Subject key identifier:   0C:34:B8:7E:6C:C1:60:B2:F4:A6:82:93:B6:EA:CB:27:5C:AF:36:FF
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Certificate issuer:       /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
Manifest number:          01D2
Signing time:             Sun 25 Jan 2026 02:28:59 +0000
Manifest this update:     Sun 25 Jan 2026 02:28:59 +0000
Manifest next update:     Sun 01 Feb 2026 02:28:59 +0000
Files and hashes:         1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: JUd+nHROOAGydW2IUKcFytSHDeSQtIL/8r0BHUznSi8=)
                          2: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: RmkIIPTPM365rnHi3iyE65DKC/DdOKV16KKoUBGaAYI=)
                          3: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: 08NPSGEr7+x4MzDThoj8ZzRXxZk450XlydgirrF3WE4=)
                          4: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: Kt+JRZe4NSSBGcnDuKjJxIa0JojNpdBSE93Vqrzpq7E=)
                          5: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: lY96nEi5CKYTXJTj1z2X+4msAEH0lgBh87K7FsjTVZ8=)
                          6: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: OnFM4tWhowHbvjU4usSptKOpZeLKLT7QxFEJy+UEpYk=)
                          7: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: Rlo1FH4ToBEybkPEC2r5mS4GIe86F2K5uAovVfJDrI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
        Validity
            Not Before: Jan 25 02:28:59 2026 GMT
            Not After : Feb  1 02:28:59 2026 GMT
        Subject: CN=69757feb-c00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:0b:82:ba:d8:df:ad:41:82:07:e2:85:ae:
                    04:6a:47:d8:c3:e4:08:c0:e1:45:4e:3e:fa:e2:f9:
                    39:ba:54:b6:77:56:3c:9d:a0:0f:35:13:fc:3f:37:
                    b8:69:c8:c5:38:ea:1a:44:54:82:89:58:43:d3:b4:
                    c9:d2:4b:88:f4:56:49:de:65:51:81:1c:d3:34:b7:
                    5f:23:f2:ff:5c:95:82:fb:98:46:e3:6c:18:db:1b:
                    4c:2e:70:17:79:53:6f:88:9d:54:2f:5d:89:05:15:
                    f3:0d:af:82:6e:92:53:65:a5:d6:65:2d:86:30:f7:
                    6c:f8:24:11:91:17:c5:76:9c:9a:0a:49:a8:1a:bc:
                    f9:61:49:d6:6c:f5:07:96:1a:27:f0:f4:de:c1:25:
                    4f:4c:02:bb:51:5c:52:89:3f:11:2d:d2:42:84:4b:
                    28:44:9c:98:4d:1f:a4:34:d0:72:40:15:97:8f:ba:
                    d8:7c:a0:2a:06:09:05:4a:74:b9:00:fc:c7:a6:62:
                    5a:ad:b9:db:38:0a:1c:91:41:5f:dd:99:32:69:36:
                    25:23:f3:cf:c3:5c:4c:0a:7d:f9:dc:f7:af:fb:15:
                    23:cc:fd:25:1b:aa:03:57:3a:1d:23:12:d1:72:0f:
                    bd:b3:6c:81:d0:10:e6:62:ac:41:ee:06:ff:75:a1:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:34:B8:7E:6C:C1:60:B2:F4:A6:82:93:B6:EA:CB:27:5C:AF:36:FF
            X509v3 Authority Key Identifier:
                keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:91:28:1b:75:6c:86:c7:39:92:ff:98:18:1a:bc:14:d7:b0:
         45:91:d4:4c:64:b0:f2:b6:26:0e:1d:f6:a5:bd:89:f0:db:a3:
         f7:d3:75:5d:e2:f4:d9:65:6f:97:ec:2e:c0:32:e4:f3:cd:ca:
         ea:a9:6f:2f:5e:87:c2:67:58:8e:b0:51:0c:62:b6:04:28:9a:
         0c:d2:5e:52:da:24:c9:61:b6:98:10:9e:8f:f7:03:14:c3:ed:
         be:d5:95:b5:6f:7b:07:53:b3:f2:04:85:b6:38:b2:fe:e8:04:
         0b:8e:94:84:93:60:2c:89:c6:5f:a1:ef:6a:67:e3:3b:08:f6:
         e3:18:c6:1f:62:60:a6:ce:e5:4d:66:10:22:ff:09:3d:09:9b:
         81:ec:a5:d8:f0:3a:68:1e:ad:a0:94:17:ad:ef:0b:ba:2b:56:
         3c:a0:46:27:95:0e:cc:bd:16:4b:25:f7:96:e7:19:f1:d7:25:
         18:82:9d:05:fc:b2:ea:28:cc:7b:28:f6:4c:37:88:47:8b:83:
         c9:59:4c:d2:42:5d:68:0d:92:dd:1b:7f:77:c8:fd:47:90:7e:
         ab:2a:8d:be:e2:b3:df:dc:27:a4:9e:57:12:7f:7e:d0:fd:60:
         ff:3d:20:49:3d:08:b1:c1:3e:eb:1b:f9:7c:06:53:6b:c4:fd:
         11:91:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:18:03 2026 by rpki-client